Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws
Cisco and WatchGuard patch vulnerabilities; SonicWall will not fix GMS flaws.
Cisco and WatchGuard have released patches for several vulnerabilities, including critical RCE and authentication flaws. Meanwhile, SonicWall has announced that its End-of-Life Global Management System (GMS) will not receive fixes for two critical vulnerabilities, CVE-2026-109593 and CVE-2026-109594, leaving users exposed.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThis incident highlights the compounding risk of running End-of-Life (EoL) software in production environments: when vendors cease support, critical vulnerabilities go unaddressed, leaving organizations permanently exposed. SonicWall's decision not to patch two critical flaws in GMS underscores that EoL systems are not just outdated — they are active liabilities. Meanwhile, the Cisco and WatchGuard patches serve as a reminder that timely remediation of critical RCE and authentication vulnerabilities is essential to prevent system compromise. Organizations that delay patching or fail to plan for EoL transitions hand attackers a reliable, indefinite foothold.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-98432
- cve — CVE-2026-121639
- cve — CVE-2026-121638
- cve — CVE-2026-121640
- cve — CVE-2026-121637
- cve — CVE-2026-76506
- cve — CVE-2026-111497
- cve — CVE-2026-109593
- cve — CVE-2026-109594